75ca6ca3b6.nxcli.io
Issued by R3
About this certificate
This digital certificate with serial number 04:17:94:23:bb:76:d0:9a:ad:17:28:21:00:92:95:ae:e1:9d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=75ca6ca3b6.nxcli.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:94:23:bb:76:d0:9a:ad:17:28:21:00:92:95:ae:e1:9dSerial Number (int): 356472549442212866447871165777925433647517
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 1b:4f:41:28:16:f5:29:66:f3:21:af:80:ea:0b:0c:e9:87:50:40:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 0b:19:66:6e:f0:b5:4b:f5:b9:fa:25:e2:1f:1a:60:3b:eb:18:fc:a8
Fingerprint (sha256): e7:20:68:5e:34:10:41:3c:4c:7a:26:99:14:3f:d0:f3:32:fa:61:20:55:d0:99:65:a1:a7:00:66:6d:d2:8e:dd
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 75ca6ca3b6.nxcli.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 75ca6ca3b6.nxcli.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
75ca6ca3b6.nxcli.io
www.surfanic.co.uk
www.surfanic.co.uk
Other certificates including the domain name nxcli.io
(limited to 100 certificates)
83b349a726.nxcli.io
c01ce80221.nxcli.io
e65b74db70.nxcli.io
beed586d4e.nxcli.io
1ef12961bc.nxcli.io
32193d853a.nxcli.io
fb0010ede0.nxcli.io
97c0634032.nxcli.io
c0b2065716.nxcli.io
23cd16924d.nxcli.io
f4248eea51.nxcli.io
a6ff7e0548.nxcli.io
189f994492.nxcli.io
2f2eaef901.nxcli.io
1b9161c466.nxcli.io
f920df99e1.nxcli.io
4d7e6bf8fd.nxcli.io
d729aee889.nxcli.io
e58ab25d1b.nxcli.io
2bfec3cdb6.nxcli.io
13184a93cf.nxcli.io
39ebea8d52.nxcli.io
66dc6c0521.nxcli.io
384ace6633.nxcli.io
7eecbcb641.nxcli.io
f9922374ac.nxcli.io
53e3e2e080.nxcli.io
365e6f4c09.nxcli.io
98c80e5efe.nxcli.io
412b6c67fe.nxcli.io
7294493087.nxcli.io
270413c85f.nxcli.io
86ff7189f9.nxcli.io
f15b9deed4.nxcli.io
11ca6b7f4e.nxcli.io
851989e32c.nxcli.io
393c23059f.nxcli.io
b30560fb1f.nxcli.io
072c983ea3.nxcli.io
bd984b0f8a.nxcli.io
ad9368b328.nxcli.io
b2b35b5c84.nxcli.io
3177a10960.nxcli.io
96dc93a4d5.nxcli.io
ec53e6feaf.nxcli.io
f9e68b75e3.nxcli.io
58c3058ed4.nxcli.io
4260dd885b.nxcli.io
7d77ee6e1a.nxcli.io
a02e02a7db.nxcli.io
d0289277d3.nxcli.io
4f72c72cab.nxcli.io
647f550416.nxcli.io
e063c05a5f.nxcli.io
3e62570ea3.nxcli.io
159852dc19.nxcli.io
c2dc673622.nxcli.io
1792b4fb56.nxcli.io
5a6610a200.nxcli.io
e845a4cae3.nxcli.io
d72086ef0c.nxcli.io
8101997dbe.nxcli.io
585c8a3b81.nxcli.io
f2a0b90985.nxcli.io
5aa62c1118.nxcli.io
4ff8fa51a6.nxcli.io
4c261e5867.nxcli.io
809e81738c.nxcli.io
d7103ad0eb.nxcli.io
b02444f47c.nxcli.io
956818466c.nxcli.io
1e8be74f25.nxcli.io
3e4c55547b.nxcli.io
48739eb5d5.nxcli.io
e49203bc96.nxcli.io
7cd5765edb.nxcli.io
588afa94fc.nxcli.io
9cba4b2e62.nxcli.io
568ad4fd75.nxcli.io
e78c1b1178.nxcli.io
6154a6f652.nxcli.io
723a3c53dc.nxcli.io
1e6d406a9e.nxcli.io
703ef58a17.nxcli.io
bb4160d0bd.nxcli.io
15f99920c4.nxcli.io
0d211719ac.nxcli.io
b7e2ca26a1.nxcli.io
0e48c172e4.nxcli.io
f06ac5ae8c.nxcli.io
b33061b2c0.nxcli.io
f426f0777e.nxcli.io
dea2299ffb.nxcli.io
ebd5f0fbe8.nxcli.io
7f042a2bac.nxcli.io
61fe82969a.nxcli.io
e16b111c3d.nxcli.io
fc1317c622.nxcli.io
f0730cd6c0.nxcli.io
ddbe3bd52b.nxcli.io
c01ce80221.nxcli.io
e65b74db70.nxcli.io
beed586d4e.nxcli.io
1ef12961bc.nxcli.io
32193d853a.nxcli.io
fb0010ede0.nxcli.io
97c0634032.nxcli.io
c0b2065716.nxcli.io
23cd16924d.nxcli.io
f4248eea51.nxcli.io
a6ff7e0548.nxcli.io
189f994492.nxcli.io
2f2eaef901.nxcli.io
1b9161c466.nxcli.io
f920df99e1.nxcli.io
4d7e6bf8fd.nxcli.io
d729aee889.nxcli.io
e58ab25d1b.nxcli.io
2bfec3cdb6.nxcli.io
13184a93cf.nxcli.io
39ebea8d52.nxcli.io
66dc6c0521.nxcli.io
384ace6633.nxcli.io
7eecbcb641.nxcli.io
f9922374ac.nxcli.io
53e3e2e080.nxcli.io
365e6f4c09.nxcli.io
98c80e5efe.nxcli.io
412b6c67fe.nxcli.io
7294493087.nxcli.io
270413c85f.nxcli.io
86ff7189f9.nxcli.io
f15b9deed4.nxcli.io
11ca6b7f4e.nxcli.io
851989e32c.nxcli.io
393c23059f.nxcli.io
b30560fb1f.nxcli.io
072c983ea3.nxcli.io
bd984b0f8a.nxcli.io
ad9368b328.nxcli.io
b2b35b5c84.nxcli.io
3177a10960.nxcli.io
96dc93a4d5.nxcli.io
ec53e6feaf.nxcli.io
f9e68b75e3.nxcli.io
58c3058ed4.nxcli.io
4260dd885b.nxcli.io
7d77ee6e1a.nxcli.io
a02e02a7db.nxcli.io
d0289277d3.nxcli.io
4f72c72cab.nxcli.io
647f550416.nxcli.io
e063c05a5f.nxcli.io
3e62570ea3.nxcli.io
159852dc19.nxcli.io
c2dc673622.nxcli.io
1792b4fb56.nxcli.io
5a6610a200.nxcli.io
e845a4cae3.nxcli.io
d72086ef0c.nxcli.io
8101997dbe.nxcli.io
585c8a3b81.nxcli.io
f2a0b90985.nxcli.io
5aa62c1118.nxcli.io
4ff8fa51a6.nxcli.io
4c261e5867.nxcli.io
809e81738c.nxcli.io
d7103ad0eb.nxcli.io
b02444f47c.nxcli.io
956818466c.nxcli.io
1e8be74f25.nxcli.io
3e4c55547b.nxcli.io
48739eb5d5.nxcli.io
e49203bc96.nxcli.io
7cd5765edb.nxcli.io
588afa94fc.nxcli.io
9cba4b2e62.nxcli.io
568ad4fd75.nxcli.io
e78c1b1178.nxcli.io
6154a6f652.nxcli.io
723a3c53dc.nxcli.io
1e6d406a9e.nxcli.io
703ef58a17.nxcli.io
bb4160d0bd.nxcli.io
15f99920c4.nxcli.io
0d211719ac.nxcli.io
b7e2ca26a1.nxcli.io
0e48c172e4.nxcli.io
f06ac5ae8c.nxcli.io
b33061b2c0.nxcli.io
f426f0777e.nxcli.io
dea2299ffb.nxcli.io
ebd5f0fbe8.nxcli.io
7f042a2bac.nxcli.io
61fe82969a.nxcli.io
e16b111c3d.nxcli.io
fc1317c622.nxcli.io
f0730cd6c0.nxcli.io
ddbe3bd52b.nxcli.io
Certificate
The complete raw certificate details for 75ca6ca3b6.nxcli.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISBBeUI7t20JqtFyghAJKVruGdMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MjMwNTQ4NDNaFw0yMzEyMjIwNTQ4NDJaMB4xHDAaBgNVBAMT Ezc1Y2E2Y2EzYjYubnhjbGkuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCZzoK0yzK0S1oRoYYCBxkiUvvWNmHzwI1Kz8uqrZVyN349xWd0XeMxAXQs rXNoW+Nd+dFr0WF5fZjK7BFZUggDG96Mik/F4pQ9z4VxdJGwjt8AbpT9ct7LVHDf PqehbWX8UNtQVCamNI8azuqnNtmx6erxC1HssDYsTVD4U9+sM8c0emH6ZyErn//e jbI+Ud2yjGvRxCCjqsDmSCjWZA8CTwmh3j2/jmiW63JEFY8h6prmH0YmiG9iG04u a6LiW3ourtvppfk2MHnHo5JRQNf5zthH7SjCqx5v1D7N9zvL2x8/1tutoyfOh/2T +p76PVMauvI+3utEw1c8VN8XCaa9AgMBAAGjggIoMIICJDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFBtPQSgW9Slm8yGvgOoLDOmHUEBWMB8GA1UdIwQYMBaAFBQusxe3 WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0 cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j ci5vcmcvMDIGA1UdEQQrMCmCEzc1Y2E2Y2EzYjYubnhjbGkuaW+CEnd3dy5zdXJm YW5pYy5jby51azATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABisDM NikAAAQDAEcwRQIhAINhJjNh5rYYNoBq6TnzCoxFuRs0ZEarQ10pWLBkQKM9AiAt DB02HoBV+YHB41pI6ozYeLIjo+SDq85otZOgsGBo1wB1AOg+0No+9QY1MudXKLyJ a8kD08vREWvs62nhd31tBr1uAAABisDMNkUAAAQDAEYwRAIgWSwdGuPg588hvIW1 KRhqItYOVHt93/D0ul6kuDfpJbkCIHrQvIAy/zhCSXrrSBVhtOUjuSsx2kygbYfu qpkYzowlMA0GCSqGSIb3DQEBCwUAA4IBAQAX0kBvMC8M5l7v2TM+Sh1IkMJLGHWU Qi8nNFVEgYz50q5edhzR64V6tFY9Ie2rE0QPOZC6VDJJ2cwNZkDFu9Un6/9aWOGd FJjhUytGY/btAk0WjXqOnnHg3UTeuZiNWs0gE0q7A7QOcAS3C/bFbSIRupHTbE23 C31UIcu4S4G3FzVvuzdbbUCQeY6CXmhkImc0TZlPvbOu+yaQo2v5tSpAdpcWK3JP GQL2Cf9FajOSRk/7BFiV8LA1r7jZvYMXDSzbwgW0cJ0kSzc8tBuKAiG0uFCqyVvB q6OTSTdJFhZxzb/OmpARW6onfyOBh3K5nf6fcE4tDoblH7o+CgpWHTcC -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc6CtMsytEtaEaGGAgcZ IlL71jZh88CNSs/Lqq2Vcjd+PcVndF3jMQF0LK1zaFvjXfnRa9FheX2YyuwRWVII AxvejIpPxeKUPc+FcXSRsI7fAG6U/XLey1Rw3z6noW1l/FDbUFQmpjSPGs7qpzbZ senq8QtR7LA2LE1Q+FPfrDPHNHph+mchK5//3o2yPlHdsoxr0cQgo6rA5kgo1mQP Ak8Jod49v45olutyRBWPIeqa5h9GJohvYhtOLmui4lt6Lq7b6aX5NjB5x6OSUUDX +c7YR+0owqseb9Q+zfc7y9sfP9bbraMnzof9k/qe+j1TGrryPt7rRMNXPFTfFwmm vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356472549442212866447871165777925433647517 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 05:48:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 05:48:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '75ca6ca3b6.nxcli.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19416294817873571036701026110285898179186384339706593688951712131514128798498540601899548415798382595572804881260221204660208022123209986240341317675712878761202136086601304957582458028745385917120092110539150867203079305816409739577902901175259210176865656408422220335599149784374949382162779727319224147543581836056234689374328414113112870051611391101094169881629280452869034701636309297143323031115775898001785821791831127249391734224823878627235324836400020892605231931464490889648293158247903232964986831154364492779071662177810219690350150722684239191023706171756006272331805327132990685551737196212282530047677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1b4f412816f52966f321af80ea0b0ce987504056 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '75ca6ca3b6.nxcli.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.surfanic.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ac0cc362900000403004730450221008361263361e6b61836806ae939f30a8c45b91b346446ab435d2958b06440a33d02202d0c1d361e8055f981c1e35a48ea8cd878b223a3e483abce68b593a0b06068d7007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ac0cc364500000403004630440220592c1d1ae3e0e7cf21bc85b529186a22d60e547b7ddff0f4ba5ea4b837e925b902207ad0bc8032ff3842497aeb481561b4e523b92b31da4ca06d87eeaa9918ce8c25 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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